NDLI: Sparse representation of implicit flows with applications to side-channel detection

Please wait, while we are loading the content...

Thread-level speculation with kernel support

Safe and flexible adaptation via alternate data structure representations

Verified construction of static single assignment form

Automatic fault location for data structures

Multiversioned decoupled access-execute: the key to energy-efficient compilation of general-purpose programs

Static deadlock detection for concurrent go by global session graph synthesis

Extended lattice-based memory allocation

GreenThumb: superoptimizer construction framework

Reducing memory buffering overhead in software thread-level speculation

Relaxed dependence tracking for parallel runtime support

Mechanizing conventional SSA for a verified destruction with coalescing

Sparse representation of implicit flows with applications to side-channel detection

Heap bounds protection with low fat pointers

On fusing recursive traversals of K-d trees

Static detection of energy defect patterns in Android applications

Mapping deviation: a technique to adapt or to guard loop transformation intuitions for legality

Performance implications of transient loop-carried data dependences in automatically parallelized loops

Kindergarten cop: dynamic nursery resizing for GHC

Reachability and error diagnosis in LR(1) parsers

Restrictification of function arguments

On fast large-scale program analysis in Datalog

Automatic data layout generation and kernel mapping for CPU+GPU architectures

SVF: interprocedural static value-flow analysis in LLVM

Improved MHP Analysis

Input space splitting for OpenCL

Iguana: a practical data-dependent parsing framework

SYCO: a systematic testing tool for concurrent objects

Sparse representation of implicit flows with applications to side-channel detection

Content Provider	ACM Digital Library
Author	Rodrigues, Bruno Quintão Pereira, Fernando Magno Aranha, Diego F.
Abstract	Information flow analyses traditionally use the Program Dependence Graph (PDG) as a supporting data-structure. This graph relies on Ferrante et al.'s notion of control dependences to represent implicit flows of information. A limitation of this approach is that it may create O(\|I\| x \|E\|) implicit flow edges in the PDG, where I are the instructions in a program, and E are the edges in its control flow graph. This paper shows that it is possible to compute information flow analyses using a different notion of implicit dependence, which yields a number of edges linear on the number of definitions plus uses of variables. Our algorithm computes these dependences in a single traversal of the program's dominance tree. This efficiency is possible due to a key property of programs in Static Single Assignment form: the definition of a variable dominates all its uses. Our algorithm correctly implements Hunt and Sands system of security types. Contrary to their original formulation, which required O(IxI) space and time for structured programs, we require only O(I). We have used our ideas to build FlowTracker, a tool that uncovers side-channel vulnerabilities in cryptographic algorithms. FlowTracker handles programs with over one-million assembly instructions in less than 200 seconds, and creates 24% less implicit flow edges than Ferrante et al.'s technique. FlowTracker has detected an issue in a constant-time implementation of Elliptic Curve Cryptography; it has found several time-variant constructions in OpenSSL, one issue in TrueCrypt and it has validated the isochronous behavior of the NaCl library. .
Starting Page	110
Ending Page	120
Page Count	11
File Format	PDF
ISBN	9781450342414
DOI	10.1145/2892208.2892230
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-03-17
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Ssa Sparse analyses Implicit flows Information flow
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

SideAuto: quantitative information flow for side-channel leakage in web applications

One representation to rule them all combining analyses on ssa with on-demand ssa construction.

Static Detection of Packet Injection Vulnerabilities: A Case for Identifying Attacker-controlled Implicit Information Leaks

Distributed Detection of Information Flows with Side-Information

Static Information Flow Analysis with Handling of Implicit Flows and a Study on Effects of Implicit Flows vs Explicit Flows

Automated black-box detection of side-channel vulnerabilities in web applications

Sparse representation to localize objects in underwater acoustic images

Robust sparse representation for adaptive sensing of turbulent phenomena

Characteristics of Secondary Flow and Coherent Structure in Compound Open Channel Flows with Inclined Main Channel Side Wall

Sparse representation of implicit flows with applications to side-channel detection

Similar Documents

SideAuto: quantitative information flow for side-channel leakage in web applications

One representation to rule them all combining analyses on ssa with on-demand ssa construction.

Static Detection of Packet Injection Vulnerabilities: A Case for Identifying Attacker-controlled Implicit Information Leaks

Distributed Detection of Information Flows with Side-Information

Static Information Flow Analysis with Handling of Implicit Flows and a Study on Effects of Implicit Flows vs Explicit Flows

Automated black-box detection of side-channel vulnerabilities in web applications

Sparse representation to localize objects in underwater acoustic images

Robust sparse representation for adaptive sensing of turbulent phenomena

Characteristics of Secondary Flow and Coherent Structure in Compound Open Channel Flows with Inclined Main Channel Side Wall

Sparse representation of implicit flows with applications to side-channel detection